HP Serviceguard Version A.11.20 Release Notes, February 2014

IMPORTANT: This additional timeout extension represents a net addition to the time it takes for
the cluster to re-form. For example, if the cluster typically took 40 seconds to re-form before any
VM nodes were added, it will take about 80 seconds when one or more VM nodes are members
of the cluster, if all those nodes have a VM guest depot. If any VM node without a VM guest depot
is a member of the cluster, it will take about 110 seconds. This is true whenever VM nodes are
cluster members, whether or not the re-formation is caused by the failure of a VM node.
For more information about HP Integrity Virtual Machines, see the HP-UX vPars and Integrity VM
V6.1 Administrator Guide at http://www.hp.com/go/hpux-hpvm-docs.
Access changes as of A.11.16
Serviceguard version A.11.16 introduced a new access method. As of A.11.16, Serviceguard
uses Access Control Policies, also known as Role-Based Access, rather than cmclnodelist or
.rhosts, to authenticate users.
For more information about Access Control Policies, see Chapter 5 of the Managing Serviceguard
manual, the Serviceguard Manager help, and the cluster and package configuration files themselves.
Considerations when Upgrading Serviceguard
• .rhosts
If you relied on .rhosts for access in the previous version of the cluster, you must now
configure Access Control Policies for the cluster users. For instructions on how to proceed, see
the subsection “Allowing Root Access to an Unconfigured Node” under “Configuring Root-Level
Access” in Chapter 5 of the Managing Serviceguard manual.
• cmclnodelist
When you upgrade from an earlier version, Serviceguard converts cmclnodelist entries
into new entries written into the cluster configuration file during the upgrade, as follows:
USER_NAME <user_name>
USER_HOST <host_node>
USER_ROLE Monitor
A wildcard + (plus) is converted as follows:
USER_NAME ANY_USER
USER_HOST ANY_SERVICEGUARD_NODE
USER_ROLE Monitor
After you complete the upgrade, use cmgetconf to create and save a copy of the new
configuration. If you do a cmapplyconf, you want to be sure it applies the newly migrated
Access Control Policies.
Considerations when Installing Serviceguard
When you install Serviceguard for the first time on a node, the node is not yet part of a cluster,
and so there is no Access Control Policy. For instructions on how to proceed, see the subsection
“Allowing Root Access to an Unconfigured Node” under “Configuring Root-Level Access” in Chapter
5 of the Managing Serviceguard manual.
Documents for This Version
For information about the current version of Serviceguard, and about older versions, see the
Serviceguard documents posted at http://www.hp.com/go/hpux-serviceguard-docs —> HP
Serviceguard.
34 Serviceguard Version A.11.20 Release Notes